View Full Version : help po..ang pc ko...
misia_162001
11-13-2007, 05:23 PM
help po mga katimog..ang pc ko mukhang napasukan ng virus...kc nung kachat ko tita ko kanina me lumabas sa kanya na file tapos sbi iopen ko daw kc me important file...pgopen ko lumabas na po yung virus...nkalagay is "ust file...."...pero wala naman po kundi virus...ngayon po parang undercontrol nya(virus) itong pc ko...kusa bang gumagalaw yung mouse...tapos kahit i-click ko ung restart or shutdown,ayaw nia na po...lagot ako ke hubby ko pag nalaman nya ito...huhuhu:( help po...bka me nakakaalam po dyan para mtanggal ito...lagot tlga ko...huhuhu:( :( :( help po mga katimog...pleaseeeee e
kakkoii_daw
11-13-2007, 05:40 PM
mukang may nagsend sau ng trojan... dapat disconnect mo muna internet nyan habang di pa nya nakukuha mga important informations sa loob ng pc mo. tsaka ka hanap ng antivirus. :D
misia_162001
11-13-2007, 05:44 PM
bka me alam ka po na anti virus...kanina pa po kasing tanghali ko ito gingawan paraan...kaya lang sa tuwing kiniclick ko yung mga pang anti virus..inaalis nya(virus) or kinacancel nya...ano po gagawinko???help po
Joshua
11-13-2007, 05:52 PM
sa tingin ko mas makakabuti, wag mo muna kalikutin ang PC mo, kasi sa pagkakaalam ko kahit idelete mo siya ng idelete ay babalik at babalik parin yan, kc automatic ciang nag rurun ksabay ng start-up o other application. kailangan mo ng tools na pang-patay jan sa virus, hndi pede basta delete lang.
antay ka ng mga reply ng mga ka timog natin.
misia_162001
11-13-2007, 05:58 PM
ok po..wait lang po ako...
Joshua
11-13-2007, 06:00 PM
paalala lamg po.
sa tingin ko wag mo mas makakabuting wag munang kalikutin yang PC mo, antay ka ng magmagandang loob na umayos niyan. kc sa pagkakaalam ko, hndi basta-basta nadedelete yan, kailangan mo ng tools na pang-patay jan sa virus. mas makakabuti ngang wag mo munang buksan, maari kacing sumasabay sa start-up ang pag-rurun ng virus na yan. at kung minsan, icancel mo man o hndi ng-rurun parin siya.
kpag hndi agad napigilan yang virus maaaring bumagal, o automatic n mag-shutdown yang PC mo in a short period of time. lalo kang mahihirapan ayusin yan.
antay ka sa mga ka timog nating expert..
thermometer
11-13-2007, 06:41 PM
Confirm.. Meron po Virus ang PC at ito ay Trojan
Since sabi mo gumgalaw ang mouse mo kahit hnde mo gnglaw
may possibility meron naka connect sa PC mo..
Things to do First. Wag ka muna connect sa internet.. or disconnect mo muna ang connection mo bago makuha ang sensitive information sa PC mo..
Second.. kailangan madetermine kung anong klaseng trojan ang Pumasok sa PC mo para makuhanan ng antivirus..
third.. Meron ka pa ba ibang PC na naka online aside from sa PC na gngamit mo?
Ingats ka po sa pag gamit ng PC mo ngayon na me virus
misia_162001
11-15-2007, 07:48 AM
sorry ngayon lang po ako nkasagot...di ko kc bnubuksan pc ska di ko kinoconnect...kya lang po ngayong pagbukas ko,andto pa din po ung bwisit(virus)...ano pong ga2win ko...me pc isang pc pa po kmi d2 sa bhay kya lang wla po ciang internet connection kc nga po isa lang ung cable ng internet namin...help po mga katimog baka me makakatulong sakin na masolve tong bwisit na ito...huhuhuhu:(
Joshua
11-15-2007, 08:50 AM
advice ko lang po, kung may time ka, magback-up kana ng mga mahahalagang file mo, ung hndi infected ng virus. ingat ka sa pagbaback-up baka makuha mo ung virus, para atleast sure ka na, kung sakali mang ireformat yang computer mo.
busy ata ang mga ka timog natin.
kakkoii_daw
11-15-2007, 08:55 AM
hello misia,
itry mo kaya itong norton online scan.. :D
http://security.symantec.co m/default.asp?producti d=symhome&langid=ie&venid=sym
or
idownload mo itong norton antivirus trial. http://spf-nocache.digitalriver .com/pub/symantec/2004/NAV081500.exe
install mo yan sa pc mong walang virus, then ikabit mo yung harddisk ng pc na may virus tsaka mo sya scan... :D
misia_162001
11-15-2007, 09:05 AM
ok thnx po..try ko lahat ng cnabi nyo...
kakkoii_daw
11-15-2007, 09:13 AM
^pag ayaw pa rin, tawagin mo na si mang jose... hehe :D
thermometer
11-15-2007, 11:15 AM
sorry ngayon lang po ako nkasagot...di ko kc bnubuksan pc ska di ko kinoconnect...kya lang po ngayong pagbukas ko,andto pa din po ung bwisit(virus)...ano pong ga2win ko...me pc isang pc pa po kmi d2 sa bhay kya lang wla po ciang internet connection kc nga po isa lang ung cable ng internet namin...help po mga katimog baka me makakatulong sakin na masolve tong bwisit na ito...huhuhuhu:(
try mo SCAN yong PC katulad ng sabi ni kakkoii.. then pag meron nadetect na virus tandaan mo po yong pangalan ng virus..then post mo dto sa amin para malaman natin kung anong anti -virus puede makatangal nyan
misia_162001
11-15-2007, 12:05 PM
una ko pong gnawa ung mgscan kso nga lang po parang me automatic cancel cia...once tnatype ko or kiniclick ung pngscan bgla pong na2wala as in parang mumu cia na kusang gumagalaw yung mouse...nawa2lan na po tlga ko pgasa...:(
thermometer
11-15-2007, 12:10 PM
una ko pong gnawa ung mgscan kso nga lang po parang me automatic cancel cia...once tnatype ko or kiniclick ung pngscan bgla pong na2wala as in parang mumu cia na kusang gumagalaw yung mouse...nawa2lan na po tlga ko pgasa...:(
problema lang kasi natin baka kumalat na yon virus sa PC mo po.. in this case mahihirapan na talaga tyo linisin sya.. online.. ang mabisa kasing pag alis ng virus is yong nasa safemode ka po ng pc at hnde naka connect sa internet..
since meron ka naman isang PC bakit hnde mo try kabit yong cable ng PC mo ngayon sa isa mong PC then reboot..baka autmatic naman ang connection ng internet mo for mean time yon muna ang try mo..
Post mo din po dto yong model no ng dalawang PC mo para ma idea kami kung ano ang gnamit mo ngayon
vectra1123
11-15-2007, 12:49 PM
Mang Jose is the answer dyan !HE!HE!
Andaming IT sa TF a? Wala kayang nakakaalam ng ganyan?
Calling,calling!! Ilang araw na kasi yang problema mo?
Post what anti-virus are you using now!
Anong exact file yung binuksan mo at saan galing
:)
thermometer
11-15-2007, 12:57 PM
I just tried to search the net about UST file sent to you on your YM.
You can try to follow below direction baka ito yong nakuha mo po.
*Download, install and the get the updates for the following,
but DO NOT RUN A SCAN YET: Just download
Adware
http://www.download.com/3001-8022_4-1073...
SuperAntispyware
http://www.superantispyware .com/download...
*Then, DISCONNECT from the internet. (UNPLUG IT)
*Go to Start>Settings>Control Panel>Internet Options
delete all browsing history (cookies, temporary internet files etc). Check the box, Also delete files and settings stored by add-ons.
*Make sure your folder settings allow you to see the ALL your folders,
Go to My Computer>Folder Options>View. CHeck all the show files boxes and UNCHECK all the Hide boxes. Click apply and ok.
*Go to C:\Documents and Settings\USERNAME\Lo cal Settings \temp
Delete all files. (for each user)
*Delete all in recycle bin
*Next, boot up in safe mode (Tap the F8 key every few seconds as the system boots up until the screen Saying Safe Mode option appears).
*Now run the above spyware programs you downloaded
gambate :D
Courtesy from Yahoo. (http://answers.yahoo.com/question/index?qid=2007111307 5653AA1N7gF)
misia_162001
11-15-2007, 01:59 PM
kapag po ba gnawa ko thermo san wlang mabu2rang files dito?kasi dmi files ni hubby d2...lagot ako pag nabura ko po yun???
thermometer
11-15-2007, 02:13 PM
according sa instruction.. yong files na temp sa internet at recycle bin po ang sinsabing burahin.. i guess yong file ni hubby mo eh nsa ibang folder or documents..
I can not gurantee na wlang mabubura sa file ng hubby mo.. either way baka virus po ang nagdelete
misia_162001
11-15-2007, 02:28 PM
gnun po ba...cge try ko po gwin un ngyn..
Frian
11-15-2007, 02:47 PM
First thing po kapag mag scan ka ng virus kung XP/ME ang gamit mo po dapat turn off ang System restore. Kasi pag naka turn on po yan may back up file yan kahit delete mo yung mga temp internet file, viruses. etc may nakaduplicate yan so turn it off muna. then run the scan. yung stinger ng mcafee malakas din yan eto yung link
http://download.nai.com/products/mcafee-avert/stinger.exe
How to turn off the system restore:
*right click " My computer icon" on your desktop then click properties, Click the System Restore Tab, then check "turn off System Restore" then click okay.
I hope this will help.:) anaty mo na lang mga suggestion ng iba pang members dito. baka may mas effective way pa yan
shiawase
11-15-2007, 02:58 PM
Nagkaproblem din ang pc ko and talagang sumakit ang ulo ko. But i've found a cure for it and it really helped me alot. Marami akong ginawa, but first you gotta try this link (http://www.atribune.org/content/view/24/2/). Read and follow the instructions before you download the necessary file. It's harmless, don't worry. ;)
misia_162001
11-15-2007, 03:34 PM
ok salamat po sa inyo...kayo lang po ngbibigay pagasa sakin...ittry ko po lhat ng advice nyo...
Frian
11-16-2007, 12:00 PM
Kamusta na po ang Computer nyo? Okay na po ba?
misia_162001
11-19-2007, 04:48 PM
hanggang ngyn po ay di pa rin cia ayos...huhuhu...:( ngscan na po me at ito ang lumabas...virus found SACC.EXE ADWARE/Adware.SurfAccuracy. Process,,,,SMSS.EXE TROJAN/Trojan.Downloader-SMSS/Fake.Process,,,,TEMP 1.EXE TROJAN/Unknown Origin. Process....yan dw po ung mga virus na sumasabay everytime mag start up ako ng khit anong application...help po..ano ga2win ko d2...:confused:
thermometer
11-19-2007, 04:55 PM
Follow this step Clearly...
Courtesy from Symantec
(http://www.symantec.com/security_response/writeup.jsp?docid=20 05-062716-0109-99&tabid=3)
Hope this help
abetsh
11-19-2007, 11:28 PM
misia san ,may trojan remover ako send ko sa iyo sa email mo, try mo.
misia_162001
11-20-2007, 10:26 AM
thnx po..received ko na po...tnatry ko na po cia now...thnx po sa lhat ng concern about my pc prob...update ko nlng po kau kung ano mngya2ri after ko try ung ke albert san...thnx po ulit
kakkoii_daw
11-20-2007, 02:14 PM
^itry mo ren itong ad-aware... kung meron pa rin... :D
http://www.lavasoftusa.com/
misia_162001
11-20-2007, 05:50 PM
huhuhu:( ...ayaw nia pa din po maalis...kpag dnadownload ko po yung mga inadvice nyo,kinacancel nia automatic...huhuhu tlga:( kpag ngiiscan ako bgla nlng ngshu2tdown pc ko..huhuhu:(
thermometer
11-20-2007, 05:59 PM
hi Misia..
marami pong klase ang TROJAN Virus.. hinde po kasi ibig sabihn na me Trojan ka eh download kna lang ng download ng antivirus na para sa Trojan..
base po kasi sa sinabi mo na virus..
" virus found SACC.EXE ADWARE/Adware.SurfAccuracy "
kailangn mo ng antivirus para sa SACC.EXE na infected.. kahit idownload mo po ang buong Trojan Antivirus pero hinde naman po para sa virus na Pumasok sa PC mo bale wala po..
kung Na try mo po yong sinasabi sa link na binangit ko sayo.. I doubt po kung hinde pa sya maalis..
As I told you before... the more na ginagamit mo po ang PC mo ngayon ..the more na mag spread out lalo ang virus po nyan..
Base po sa Instruction .. kailangn mo po gawin ang sumusunod.
1.boot your machine on safemode
2.add/remove program
3.delete registry entry.
try the instruction on the link
Symatect removal for Adware.SurfAccuracy (http://www.symantec.com/security_response/writeup.jsp?docid=20 05-062716-0109-99&tabid=3)
let us know kung nagawa mo po yong instrction sa link
thermometer
11-20-2007, 06:04 PM
try also this link.. it is more user friendly
http://www.processlibrary.c om/directory/files/sacc
misia_162001
11-21-2007, 08:45 AM
ohayo gozaimasu...thermo san gnawa ko na po yung cnabi nyo po at sinunod ko po instruction...malolo ka na nga o ako dhil everytime na me gagawi me para mapatay itong bwiset na virus na,ng automatic shutdown cia...cguro pinaka dabest kong magagawa is mgipon ng pera pampagawa ng pc...huhuhu:( anyway,maraming maraming salamat po sa lahat ng naging concern sa pc prob ko...thanx po tlga...
thermometer
11-21-2007, 09:31 AM
ohayo gozaimasu...thermo san gnawa ko na po yung cnabi nyo po at sinunod ko po instruction...malolo ka na nga o ako dhil everytime na me gagawi me para mapatay itong bwiset na virus na,ng automatic shutdown cia...cguro pinaka dabest kong magagawa is mgipon ng pera pampagawa ng pc...huhuhu:( anyway,maraming maraming salamat po sa lahat ng naging concern sa pc prob ko...thanx po tlga...
gambate po...hope you learn some lesson po. "dont open unstrusted website":D
especially in yahoo.. mahirap po kasi mag alis ng virus lalo at kmakalatat na
misia_162001
11-21-2007, 10:00 AM
opo..ive really really learned my lessons...thnx po ulit sa inyong lahat...:)
palaboy
11-21-2007, 12:35 PM
HI!misia_162001 (http://www.timog.com/forum/member.php?u=3498) !
Mukhang talagang walang makagawa ng pc mo yata!
Would you like to try my simple ability? HE!HE!
If you want please pm me and i will try if i can help you!
1. Kailangan updated po ang inyong windows installation
2.Gusto ko pong malaman ang anti-virus na ginagamit nyo
3Installing more than 1 antivirus may result to conflict between each other,pati na rin sa inyong sytem po!
4.Kailangan ko po yung "LOG File" ng Anti-virus para ma analyze ko po kung anong dapat gawin! I will instruct you later if you wish!:)
cHiBichan
12-18-2007, 02:45 AM
ate mahirap talaga alisin ang ust scandal na virus!naurur din ako jan dhil kinokopya nya ang smss file at Isass na ka2lad ng nasa sys32 nting mga 32bit users.try mo isearch sa registry mo lahat ng smss at isass pero i doubt it bka mabura mo ung real smss at isass na file ng windows.once na mangyare un...kaboom!format na ang katapat nyan dhil mgiging corrupted na windows mo.di sya maalis ng avg antivirus,nod,avast, mcafee.dko lng sure sa ibang antiviruses.
eto pa nakakurur jan...pag me kachat ka minsan kusa nagsesend ng messages account mo sa kachat mo:D anyways gambatte ate.
to enter registry editor---> type regedit sa run.tgnan mo na lng unusual processess na running sa pc mo.to do this press ctrl+alt+del to enter task manage.click mo ung processess tab and find mo ung kakaibang running processess mo.tpos ung filename na un isearch mo sa registry editor at i-delete mo sya manually.search over and over again until wala na makita na ganun file sa searches mo.eto example ng running processess sa task manager
cHiBichan
12-18-2007, 02:55 AM
eto un task manager..look mo na lng unusal running processess mo
cHiBichan
12-18-2007, 02:57 AM
eto ung regedit
click mo un edit tpos find then type the file u are searching for.
sana mabura mo lahat ng virus sa pc mo.gambatte..sana naka2long din
sageofhalo
12-18-2007, 10:22 AM
Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startu p
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script
[autorun]
open=smss.exe
shell\Open\Command=s mss.exe
shell\open\Default=1
shell\Explore\Comman d=smss.exe
shell\Autoplay\comma nd=smss.exe
Funny UST Scandal.avi.exe(228k b) in all root drives
Registry Entries-HKLM\Software\Micros oft\WindowNT\Current Version\Winlogon=she ll(killer.exe)
HKCU\Software\Micros oft\windows\Currentv ersion\Run=runonce(c :\windows\smss.exe)
HOw to remove this lame virus????
-first download taskiller in http://www.rsdsoft.com/task_killer/index.php4 and install it to
your computer because you cant use taskmanager to terminate the virus(the virus automatically close taskmanager).
-run taskiller and left click it on the system tray(the one with a skull icon)
-click processes
-to close the virus, select process and click yes to the question
(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe
note: close only file that have the same icon of Funny UST Scandal.avi.exe
CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf ,Funny UST Scandal.avi.exe and delete it
-if theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above.......
-now type this on the command prompt "cd windows" without quotes(na naman!)
-type "attrib -h -s smss.exe" without quotes(uli)
-type "start c:\windows" without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\prog rams\startup
-delete lsass.exe
-click "start" then "run"
-type "regedit" without quotes then delete the registry entries above....
misia_162001
12-18-2007, 09:04 PM
to chibichan...hay naku correct ka dyan!!!lahat ng kachat ko ganun ginagawa nya..send nya din ng virus..di na tuloy me nagchachat..nadala ba..:( pero now ok na po ang pc ko dahil sa hikari(commercial ba...hehehe)..kc dati kaming adsl then nagpalit kami hikari,inayos nila for free ang pc,wala na pong virus,,,salamat sa concern ka tf...merry christmas:)
to sageofhalo...salamat din sa concern mo...i really appreciate it...tulad nga po ng nabanggit ko sa aking liham..hehehe...inay os na ng hikari ang problem ko...thank you po talaga sa inyong lahat...merry christmas:)
sa lahat po ng naging concern...ok na po ang pc ko...maraming salamat po and merry christmas:)
cHiBichan
12-19-2007, 02:34 AM
hehe..no prob.merry christmas din ka-tf.mejo late kmi sa posts ng reply nmin hehe.. good to hear na ok na pc mo now.tama din si sagehalo me mga itatype pa na attributes etc..sa command prompt.hehe but anyways oks na ang lahat.nxt time be careful sa chats :) dami loko jan meron pa iba jan nagsesend ng keyloggers kya dpat ingats tyo lagi.cge hapi surfing na lng po.merry christmas to all ka-tf's.
vBulletin® v3.7.0 Beta 4, Copyright ©2000-2008, Jelsoft Enterprises Ltd.